Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
File:                     n6yKuWoNopKfw9GHG-1vdD6MlXc.cer (raw, json)
Hash identifier:          HaFFyc7n1xv24EDsFcFLXYYcn+293xdu+r9LMFZ3aDY=
Subject key identifier:   9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02AAF5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Apr 2026 13:29:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 149634
                          IP: 45.114.160.0/22
                          IP: 103.54.112.0/22
                          IP: 103.183.64.0/23
                          IP: 2400:6060::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174837 (0x2aaf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  8 13:29:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:5d:8c:b6:f1:6f:b6:a2:eb:11:c3:bd:ca:
                    04:6f:00:fc:6f:89:08:bf:a4:d0:d6:06:be:f7:cc:
                    bb:a6:2d:b7:63:af:63:06:66:1c:da:39:9e:de:70:
                    16:9d:b1:04:a6:dd:18:e3:64:08:27:cd:20:c3:10:
                    e1:ab:44:38:00:d5:cb:21:7f:05:a3:58:e4:91:91:
                    e9:2c:fe:50:b5:2b:06:99:3d:e7:b3:ac:cf:28:8a:
                    0b:42:86:c5:55:01:98:4d:7e:98:94:b6:d0:da:78:
                    82:d4:25:2e:b7:41:1b:52:77:c5:1d:e9:b6:7c:60:
                    fb:a6:6d:ca:35:0c:f6:2d:39:a1:52:77:d9:dc:e3:
                    e3:fc:b4:cf:66:3c:a7:88:68:97:db:b0:0e:4a:cb:
                    ea:a0:6a:5c:f8:2a:fb:b4:18:1f:b9:16:31:dc:6f:
                    fa:1b:e3:ad:0b:c1:93:b8:f9:bd:45:11:b7:d8:fa:
                    19:dd:07:7d:5a:91:a6:64:b9:fb:f4:ba:4d:cc:a4:
                    63:ca:73:ad:ac:06:6c:af:19:9e:d3:c7:d0:24:34:
                    38:37:0c:f2:3e:58:9d:9c:a2:57:69:55:42:2f:f9:
                    e0:a0:e8:2b:7d:e0:a9:9b:90:c4:f8:fc:c7:de:3b:
                    71:4d:0c:53:7b:a2:33:6c:d7:0d:0f:93:bb:b3:a9:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149634

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.160.0/22
                  103.54.112.0/22
                  103.183.64.0/23
                IPv6:
                  2400:6060::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:2c:1f:a5:ed:00:a7:98:e8:b6:37:dd:df:c2:ea:12:64:
         e6:ce:ab:51:04:91:f7:73:45:60:62:ca:bc:78:d1:6d:fe:66:
         5b:af:47:ca:ed:4d:41:93:fd:29:b6:32:18:fa:ae:27:07:71:
         7e:d2:3f:59:68:5d:29:73:91:cb:8e:aa:a0:4d:69:81:4c:bd:
         2e:0f:a9:b7:ec:5e:56:ec:2f:e6:4a:fa:85:8b:7c:d6:1d:72:
         7e:88:98:d6:a8:e9:7d:bb:9e:66:a6:b7:56:fc:7f:6f:d1:32:
         d8:6a:46:f2:59:d3:4b:de:3d:b0:e7:05:3b:85:f0:f3:9c:bc:
         f7:b4:aa:74:3a:3f:3e:42:6e:64:a3:24:d4:a6:53:30:c6:04:
         c9:f3:07:b0:e5:f9:d4:01:3e:c9:e0:56:29:e8:09:10:1a:a8:
         fc:f4:85:05:6d:6d:6b:fa:69:f2:54:96:2f:b5:c0:01:80:89:
         a2:82:09:89:96:14:da:05:a1:9e:ef:b1:48:35:4f:d7:43:0e:
         99:df:27:cb:44:ca:7a:f9:db:ee:60:33:ac:cb:5a:de:68:fe:
         7a:49:65:28:66:ac:5c:2e:9c:b8:77:cb:ad:29:93:ab:82:c3:
         98:01:bf:52:0c:3a:34:4d:ff:0e:fd:63:f4:1a:5b:48:a4:15:
         47:25:60:2a
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDAqr1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQwODEzMjkzMVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4
NzFCRUQ2Rjc0M0U4Qzk1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKz12MtvFvtqLrEcO9ygRvAPxviQi/pNDWBr73zLumLbdjr2MGZhzaOZ7ecBad
sQSm3RjjZAgnzSDDEOGrRDgA1cshfwWjWOSRkeks/lC1KwaZPeezrM8oigtChsVV
AZhNfpiUttDaeILUJS63QRtSd8Ud6bZ8YPumbco1DPYtOaFSd9nc4+P8tM9mPKeI
aJfbsA5Ky+qgalz4Kvu0GB+5FjHcb/ob460LwZO4+b1FEbfY+hndB31akaZkufv0
uk3MpGPKc62sBmyvGZ7Tx9AkNDg3DPI+WJ2coldpVUIv+eCg6Ct94KmbkMT4/Mfe
O3FNDFN7ojNs1w0Pk7uzqb9XAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUn6yKuWoN
opKfw9GHG+1vdD6MlXcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZFMkRDLzZEODk2NDRBNkFFNzExRUQ5NEI0NEM4N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdv
Tm9wS2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkiCMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLXKgAwQCZzZw
AwQBZ7dAMA0EAgACMAcDBQAkAGBgMA0GCSqGSIb3DQEBCwUAA4IBAQBhpiwfpe0A
p5jotjfd38LqEmTmzqtRBJH3c0VgYsq8eNFt/mZbr0fK7U1Bk/0ptjIY+q4nB3F+
0j9ZaF0pc5HLjqqgTWmBTL0uD6m37F5W7C/mSvqFi3zWHXJ+iJjWqOl9u55mprdW
/H9v0TLYakbyWdNL3j2w5wU7hfDznLz3tKp0Oj8+Qm5koyTUplMwxgTJ8wew5fnU
AT7J4FYp6AkQGqj89IUFbW1r+mnyVJYvtcABgImiggmJlhTaBaGe77FINU/XQw6Z
3yfLRMp6+dvuYDOsy1reaP56SWUoZqxcLpy4d8utKZOrgsOYAb9SDDo0Tf8O/WP0
GltIpBVHJWAq
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:38 2026 by rpki-client